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Resting a regisBy key value for the handle, and 

Ihuinihg security clearance .0 '^"^^^^ , ^e for a regis»y key «> a 
Th.mea.odof ctebn 1 &r,her compnsmg af«r . 

calling process- -.trvkev 
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.eten«lnl.gwhea«r*epn>c«s.s«»^ ^^^^^^^„„„^, 
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list, completing the request ^ ^^^.^^ value for the 

T^e memod of claim I farther compnsmg after 
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handle: 



^20 



determiningaprocessIDandregistrykeyv^ue^^^^^ 
determining whether the process, sea. 

ifthe registry key IS on the rejec 



value; „^«i..tine the request; 

KO^el^oecsslsuolon^esecuredU^^— 
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s/^Are'"^ monitoring system wherein the registry is moni^^^^ 
requesting a handle for a registry key to a calling process; 
requesting a registry key value for the handle; and 
obtaining security clearance to complete the requests. 
5 6. Tl^eregistrymonitoringsystemofclaimSfurthercomprisingafterrequestingahandle 

for a registry key to a calling process: 
determining a process ID and registry key; 

determining whether the process is secured by checking a secured process hst; 
if the process is secured, determining whether the registry key is onarejectionhst; 

if the registry key is on the rejection list, denying the process access to the registry key; 
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and 



if «.e proems U no. on the secured Us. or if ^ registty key nam. is no. on *e rejection 
^ list, completing the request. 

3 7. •ae.egis^ynKw^ringsys.emofdain.Sfimhereomprisi.gaft^ 

^ key vahie for the handle: 

3 determining a process ID and registry key vahie; 

° determining whether the process is secured by checking the secured process hst; 

^ iftheprocessissecured,determiningwhethertheregistrykeyisontherejecti^ 

5 if the registry key is on the rejection Ust, denying the process access to the registry key 

20 value; 

O if the process is not on the secured list, completing the request; 

if the registry key is not on the rejection list and the process is on the securedprocess hst, 

processingthevaluerequestanddeterminingwhetherthevalueisontherejeconhst; 
if the value is not on the rejection list allowing the request to be completed; and 
25 if the value is on the rejection list denying access to the registry key value. 

8. The registry monitoring system of claim 5 further comprising after modifying and 

deleting handles and values: 

determining a process ID; 

.te«™ning«hett.er reprocess is securedbychectogwheflaer reprocess .son toe 

30 secured process list; 

ifAe process is no. on a>e secured process lis., completing Aereques.-, and 

ifti.eprocessiso„U.esecuredprocesslisuno.allov™g*ere,u=s.»becomple«4 
9 A compu«r configured «> mom.or a regiary according «. a method compnsmg-. 
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requesting a handle for a registry key to a calling process; 

requestmg a registry key value for the handle; and 

obtaining security clearance to complete the requests. 

1 0. The computer of claim 9 further comprising after requesting a handle for a registry key to 

5 a calling process: 

determining a process ID and registry key; 

determining whether the process is secured by checking a secured process list; 
if the process is secured, determining whether the registry key is on a rejection list; 
if the registry key is on the rejection list, denying the process access to the registry key; 
.0 and 

if the process is not on the secured list or if the registry key name is not on the rejection 
list, completing the request. 
11. The computer of claim 9 further comprising after requesting a registry key value for the 

handle: 

1 5 determining a process ID and registry key value; 

determining whether the process is secured by checkmg the secured process Ust; 
if the process is secured, determining whether the registry key is on the rejection Ust; 
if the registry key is on the rejection list, denying the process access to the registry key 
value; 

izO if the process is not on the secured list, completing the request; 

J if the registry key is not on the rejection list and the process is on the secured process list, 

processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection list allowing the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 
25 12. The computer of claim 9 further comprising after modifying and deleting handles and 
values: 

determining a process ID; 

determining whether the process is secured by checking whether the process is on the 
secured process list; 

30 if the process is not on the secured process Ust, completing the request; and 

if the process is on the secured process Ust, not allowing the request to be completed. 
13. A machine-readable medium comprising a program to monitor a registry according to a 
method comprising: 
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requesting a handle for a registry key to a calling process; 

requesting a registry key value for the handle; and 

obtaining security clearance to complete the requests. 

14. The machine-readable medium of claim 13 further comprising after requesting a handle 

5 for a registry key to a calling process: 

determining a process ID and registry key; 

detemfiining whether the process is secured by checking a secured process list; 
if the process is secured, deteraiining whether the registry key is on a rejection list; 
if the registry key is on the rejection list, denying the process access to the registry key; 
10 and 

if the process is not on the secured list or if the registry key name is not on the rejection 

Ust, completing the request. 
^5 15. The machine-readable medium of claim 13 further comprising after requesting a registry 

key value for the handle: 
^ determining a process ID and registry key value; 

Q determining whether the process is secured by checking the secured process list; 

^ if the process is secured, determining whether the registry key is on the rejection list; 

H= if the registry key is on the rejection list, denying the process access to the registry key 

fli value; 

23 if the process is not on the secured list, completing the request; 

□ if the registry key is not on the rejection list and the process is on the secured process list, 

processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection list allowing the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 

25 16. The machine-readable medium of claim 13 further comprising after modifying and 
deleting handles and values: 

determining a process ID; 

determining whether the process is secured by checking whether the process is on the 
secured process list; 

30 if the process is not on the secured process list, completing the request; and 

if the process is on the secured process list, not allowing the request to be completed. 
17. A computer implemented secured data transmission system having a receiver to access 
secured file content provided by a sender, wherein the receiver includes a registry monitoring 
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system wherein the registry is monitored by a method comprising: 
requesting a handle for a registry key to a calling process; 
requesting a registry key value for the handle; and 
obtaining security clearance to complete the requests. 

18. The computer implemented secured data transmission system of claim 17 further 
comprising after requesting a handle for a registry key to a calling process: 
determining a process ID and registry key; 

determining whether the process is secured by checking a secured process list; 

if the process is secured, determining whether the registry key is on a rejection list; 

if the registry key is on the rejection list, denying the process access to the registry key; 

and 

if the process is not on the secured list or if the registry key name is not on the rejection 
list, completing the request. 

19. The computer implemented secured data transmission system of claim 17 further 
comprising after requesting a registry key value for the handle: 

determining a process ID and registry key value; 

determining whether the process is secured by checking the secured process list; 
if the process is secured, determining whether the registry key is on the rejection list; 
if the registry key is on the rejection list, denying the process access to the registry key 
value; 

if the process is not on the secured list, completing the request; 

if the registry key is not on the rejection list and the process is on the secured process list, 
processing the value request and determining whether the value is on the rejection list; 
if the value is not on the rejection list allowing the request to be completed; and 
if the value is on the rejection list denying access to the registry key value. 

20. The computer implemented secured data transmission system of claim 17 further 
comprising after modifying and deleting handles and values: 

determining a process ID; 

determining whether the process is secured by checking whether the process is on the 
secured process list; 

if the process is not on the secured process list, completing the request; and 

if the process is on the secured process list, not allowing the request to be completed. 
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